Skip to content
OpenAdvisories

Vendor

ZSPACE

6 known vulnerabilities.

Products

Q2C NAS 3 Z4Pro+ 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-15133

    ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection

    A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024. The impacted element is the function zfilev2_api_CloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. Such manipulation leads to command injection. It is possible to…

    ZSPACE Z4Pro+
  • Medium 6.3
    CVE-2025-15132

    ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection

    A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2_api_open of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation causes command injection. It is possible to initiat…

    ZSPACE Z4Pro+
  • Medium 6.3
    CVE-2025-15131

    ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection

    A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2_api_SafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed fro…

    ZSPACE Z4Pro+